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ABSTRACT: 

An anti-tamper shield for an integrated circuit (IC) includes a bond wire which passes through a 
protective layer such as an epoxy encapsulating layer of the IC. The bond wire carries a signal, 
such as a steady state current, which allows an active component of the IC, such as a secure 
processor, to function. The bond wire is carried within and/or proximate to the encapsulating 
layer such that a decapsulation of the IC will cause a rupture of the electrically conductive 
member, thereby rendering the processor non-functional. The bond wire may be coupled to the 
processor in a variety of configurations, including the use of internal or external bond pads, lead 
frame contacts, and/or directly to a computer board on which the IC is carried. A metallic shield 
layer may be located between the active component and a top portion of the encapsulating layer 
to prevent a pirate from using an electron microscope, for example^ to survey the active 
component region. 
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(54) AntMamper bond wire shield for an integrated circuit 



(57) An anti-tamper shield for an integrated circuit 
(IC) includes a bond wire which passes through a pro- 
tective layer such as an epoxy encapsulating layer of 
the IC. The bond wire carries a signal, such as a steady 
state current, which allows an active component of the 
IC, such as a secure processor, to function. The bond 
wire is carried within and/a proximate to the encapsu- 
lating layer such that a decapsulation of the IC wQ) 
cause a rupture of the electrically conductive member, 
thereby rendering the processor non-functional. The 
bond wire may be coupled to the processor in a variety 
of configurations, including the use of internal or exter- 
nal bond pads, lead frame contacts, andfor directly to a 
computer board on which the IC is carried. A metallic 
shield layer may be located between the active compo- 
nent and a top portion of the encapsulating layer to pre- 
vent a pirate from using an electron microscope, for 
example, to survey the active component region. 
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Description 

BACKGROUND OF THE INVENTION 

The present invention relates to the protection of 
integrated circuits (ICs), and more particularly, to a 
scheme for preventing the reverse engineering of ICs. 
The invention is particularly useful in protecting secure 
ICs which are used in cable and satellite television 
decoders to prevent unauthorized users from receiving 
television broadcasts. The invention is equally useful in 
protecting secure ICs used in other applications, includ- 
ing terminals and smart cards for electronic funds trans- 
actions, premises access control, electronic games, 
and the (ike. 

Due to the continuing popularity of the pay televi- 
sion market, there exists a tremendous financial motiva- 
tion for unauthorized persons known as "pirates" to 
modify the access control of set-top boxes (e.g., decod- 
ers) to allow the reception of television programming 
without payment of the required subscription fees. The 
modified decoders are purchased by unscrupulous indi- 
viduals through various markets and used to illegally 
receive and view the television signals. 

To produce a modified decoder, a pirate must 
extract certain information from a genuine decoder 
which is usually known only to the authorized manufac- 
turer. The decoder typically includes a secure (ag., 
cryptographic) processor which contains information 
such as cryptocpaphic keys which are used in descram- 
bling a scrambled television signal or other program- 
ming service signal (e.g., audio or data). Since the 
secure processor performs access control functions, it 
is a focal point of the pirate's attention. Accordingly, the 
pirate will employ various techniques in an attempt to 
gain information from the secure processor. 

One common attack technique is known as "prob- 
ing." A secure processor includes an integrated circuit 
(IC) which is fabricated as a monolithic device with an 
ensemble of active and passive components, including 
transistors, resistors, capacitors, and diodes which are 
interconnected within a monolithic block of semiconduc- 
tor material. During probing, ICs such as very large 
scale integrated (VLSI) circuits are subject to an inva- 
sive attack wherein the die (e.g., IC or "chip*) is exposed 
by decapsulation. During decapsulation, the compound 
materia] which encapsulates or surrounds the die is 
systematically removed. Then, probes which measure 
current and other parameters are used to monitor the 
electronic sigials in the active components of the chip 
The term tampering" as used herein is meant to 
encompass both probing and decapsulation. 

A pirate may perform the following decapsulation 
steps to prepare a chip for probing. First, the chip is 
removed from the decoder board, with the die still inside 
the IC package. Generally, this is the case when a chip 
is mounted on a large board. The decoder board may 
be a computer board such as those used in a personal 



computer (PC). If the chip requires a direct current from 
a battery or the like to circumvent a self-destruct fea- 
ture, then battery wires are soldered to a positive volt- 
age pin (e.g., V^n) pin and to a negative voltage pin 

5 (e.g., VtJ on the outside of the chip prior to removal 
from the board. The chip is then removed from the 
board with the battery wires still attached. If the battery 
power is interrupted, the chip may self-destruct by eras- 
ing critical information stored in memory. The pirate can 

10 identify the appropriate battery pins by taking resistance 
measurements of the traces on the board which are 
connected to the battery, and then confirming by taking 
voltage readings of the traces wfth a main voltage (e g., 
V^off. 

is Second, the location of the die wrfhin the encapsu- 
lating compound of the IC package can be determined 
by taking an x-ray of the IC package. Third, a mechani- 
cal grinder can be used to remove as much of the 
encapsulating compound as possible above the top sur- 

zo face of the die without damaging the die. Fourth, chem- 
ical etching or plasma etching is performed to remove 
the last portions of encapsulating compound which 
remain over the area of the die which is to be probed. 
Some chemical etchants work so well on the encapsu- 

25 lating compound that the grinding step can often be 
skipped. 

In current chip designs, including those for applica- 
tion specific ICs (ASICs), a pirate wOl generally not 
encounter significant obstacles in performing the four 

so steps above Removal of the chip from the board with 
the battery wires still attached is usually considered to 
be the most delicate operation. Thus, the undamaged > 
die. which is protected by an inert glassivation coating, 
can be exposed by a pirate as long as a short circuit or 

ss open circuit of the battery power is not created. Further- " 
more, damage to bond wires can also easily be avoided. 
Bond wires may connect bond pads of the chip to pack- 
age pads in the protective encapsulating package, and 
are located on the periphery of the device, as will be dis- 

40 cussed in greater detail below. The decapsulation proc- 
ess can avoid exposing the die in the area where critical 
bond pads are located, that is, where the battery power 
is input into the active component 

One approach to deterring probing is discussed in 

45 commonly-assigned U.S. Patent 4,933,898, issued 
June 12, 1990 to Gilberg et a!., entitled "Secure Inte- 
grated Circuit Chip With Conductive Shield." Gflberg et 
ai. disclose using one or more conductive layers to over- 
lay a secure area of an IC The conductive layers shield 

so the secure area from inspection and carry a power sig- 
nal to the IC. Removal of one of the layers by a pirate 
causes the loss of power to the components of the 
secure area. However, the implementation of this 
approach is somewhat complex. 

55 Accordingly, it would be desirable to provide an 
apparatus which deters or otherwise hinders probing of 
an IC chip by a pirate. In particular, H woukf be desirable 
to provide a barrier to decapsulation which uses stand- 
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ard bond wires to render the IC non-functional when the 
bond wire is ruptured The barrier should be compatible 
with existing chip designs and inexpensive to imple- 
ment. The present invention provides a system having 
the above and other advantages. 

SUMMARY OF THE INVENTION 

In accordance with the present invention, an anti- 
tamper shield tor an integrated circuit (IC) is presented. 
The shield is adapted for use with an IC which includes 
a substrate for carrying an active component such as a 
secure processor which may include a memory, CPU, 
and other micro-electronic components. The IC may 
have a protective layer such as an epoxy encapsulating 
layer for protecting the processor. 

The anti-tamper shield comprises an electrically 
conductive member such as a bond wire for carrying a 
signal which allows the processor to function. This sig- 
nal may include a steady state electrical current which is 
supplied by a battery via positive and negative termi- 
nals. The wire may be carried, at least in part, in a pro- 
tective layer of the IC such that removal of the protective 
layer will rupture the wire, thereby causing an open cir- 
cuit. 

The wire may be coupled to the processor in a vari- 
ety of configurations. For example, the wire may be cou- 
pled between a first terminus which is external to the 
processor and a second terminus which is internal to 
the processor. Furthermore, the electrically conductive 
member may extend between points which are external 
and/or internal to the micro-electronic circuits of the 
processor. The terminus may be a bond pad within the 
processor, or a bond pad or lead frame contact outside 
the processor, for example. 

Alternatively, the wire or other electrically conduc- 
tive member may be coupled between first and second 
terminuses, both of which are external to the processor. 
The wire may optionally traverse the top surface of the 
micro-electronic circuit and/or may extend in a region 
away from the micro-electronic circuit and/or processor. 

The electrically conductive member may be cou- 
pled between first and second terminuses, both of 
which are internal to the processor. 

In another configuration, the electrically conductive 
member may comprise conductive epoxy, and/or a sub- 
stance which is tailored to have a desired resistance to 
an etchant The conductive epoxy may be printed as a 
trace over the micro-electronic circuit. In this case, fte 
use of an etchant by a pirate to remove the protective 
layer of the IC will also destroy the conductive epoxy, 
thereby terminating the signal which allows the proces- 
sor to function. 

In all configurations, even if a pirate was successful 
in decapsutating the die with the conductive members 
intact, the conductive member would pose a physical 
obstacle to probing with mechanical probes or an elec- 
tron microscope since a conductive member suspended 



in space present a hazard that is difficult to overcome. 
Probes must be continually lifted and reconfigured into 
new positions by the pirate to aQow different angles of 
approach in order to probe a die and avoid rupturing any 

s of the conductive members. In fact the electrically con- 
ductive member may be formed in a grid pattern to fur- 
ther aggravate probe positioning. 

Furthermore, a metallic shield layer may be dis- 
posed between the processes and the top portion of the 

io encapsulating layer to prevent a pirate from using an 
electron microscope, for example, to survey (he., map) 
the processor or the micro-electronic circuits contained 
therein. The use of a metallic shield in conjunction with 
the anti-tamper bond-wire shield poses an additional 

is obstacle to the pirate, thereby making the pirate's task 
more time-consuming and expensive. 

The IC may be carried in a smart card. Moreover, a 
portion of the body of the smart card may provide the 
encapsulating layer. 

20 Optionally, a wire which does not carry an electrical 
signal may extend, at least in part over the micro-elec- 
tronic component to deter probing of the micro-elec- 
tronic component. In particular, the wire may form a grid 
pattern which makes it difficult for a pirate to position 

25 and move a probe tip near the micro-electronic compo- 
nent 

BRIEF DESCRIPTION OF THE DRAWINGS 

30 FIGURE 1 is a simplified diagram illustrating a 

decapsulated integrated circuit 

FIGURE 2 is a cross-sectional view illustrating an 

integrated circuit with an anti-tamper bond wire shield in 

accordance with the present invention. 
35 FIGURE 3 is a top view of a secure processor of an * - 

integrated circuit with an anti-tamper bond wire shield in 

accordance with the present invention. 

FIGURE 4 is a top view of a secure processor of an 

integrated circuit with an anti -probing wire grid shield in 
40 accordance with the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

An anti-tamper apparatus for an integrated circuit 
45 (IC) is presented for preventing active components, 
such as a secure processor used in a television 
decoder, from being tampered with (e.g.. reversed engi- 
neered!). 

FIGURE 1 is a simplified (Sagram of a decapsulated 
so integrated circuit. The integrated circuit (IC), shown 
generally at 100, includes an epoxy encapsulating com- 
pound region 110. A number of package pins P are con- 
nected to respective bond pads B via lead wires W. A 
bond pad or die pad is one of many metal connection 
55 pins that reside in the periphery of the die 130. and are 
used to couple a unique circuit portion (e.g., input/out- 
put (I/O) port) with a corresponding external package 
pin. The pad pitch is the distance (e.g., in microns) 
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between the midpoints of the adjacent I/O bond pads B. 
The die can comprise, for example, a silicon micro-chrp 
which contains micro-eJectronic devices. The package 
pins P. wires W and bond pads B carry current to and 
from the IC 100. and are exposed when the epoxy com- 
pound which normally covers the die 130 is removed 
using the decapsulating steps discussed previously. 

Wirebond is a step in the die packaging process 
where thin wires are bonded between the die I/O pads 
and the package pads. The die 130 includes exemplary 
active components 150, 152, 154 and 156. In particular, 
component 150 may be a secure processor which 
includes cryptographic information. Thus, the die com- 
ponents are exposed and can be probed by a pirate to 
ascertain the cryptographic information and other oper- 
ating characteristics of the active components. 

FIGURE 2 is a cross-sectional view of an integrated 
circuit with an anti-tamper bond wore shield in accord- 
ance with the present invention. The ID, shewn gener- 
ally at 200, includes a top epoxy layer 210 and a bottom 
epoxy layer 212. An electrically conductive member 
such as a bond wire 270 ts shown coupling bond pads 
260 and 262. Note that the electrically conductive mem- 
ber need not have a circular cross-section. Thus, it 
should be understood that the terms "electrically con- 
ductive member and "wire" as used herein are not lim- 
ited to a sm#e filament member having a circular cross- 
section, but may encompass configurations including a 
number of filaments which are wound or twisted 
together, a configuration with a varying cross section, a 
configuration with a rectangular cross section, a mesh 
configuration, a configuration wherein a single wire is 
coupled to more than two terminals, or virtually any 
electrically conductive member. In particular, the wires 
may be provided in a grid pattern with a spacing which 
is small enough to prevent a probe from passing 
through the mesh or moving easily within the mesh, as 
discussed below in conjunction with FIGURE 4. In fact, 
a grid configuration may be used even when the wire 
does not carry an electrical signal which the processor 
requires to function. The mere presence of the grid 
serves as a deterrent to probing. 

Furthermore, the electrically conductive member 
270 may comprise a substance such as conductive 
epoxy which is formed by doping epoxy with a conduc- 
tive materia) such as silver to achieve a desired conduc- 
tivity. Advantageously, the epoxy can be selected to 
have a resistance to etching which is similar to the 
resistance of the protective layer of the IC. and/or the 
resistance of the conductive epoxy can be tailored 
according to a specific etchant which a pirate is 
expected to use. The conductive epoxy may be printed 
directly to the surface of the die. 

A glassivation layer 220 is also provided. Glassiva- 
tion refers to an inert protective coating which is placed 
over the entire surface of a completed die to protect the 
circuit Glassivation protects the surface of the die from 
chemical and moisture contamination, handling dam- 



age, and the possibility of shorting the die caused by 
loose particles. It can also inhibit metal migration and 
other metal degradation. 

A shield 230 is a metal layer that provides current to 

5 various components within the IC 200, such as the com- 
ponents 150-1 56 of FIGURE 1 . If power to the shield is 
interrupted, then a secure processing component may 
self-destruct such that cryptographic data which is 
stored in the secure processor is erased. Additionally, 

id the shield 230 serves to prevent a pirate from using a 
scanning electron microscope to detect changes (eg.. 
voltage changes) in portions of the secure processor, 
such as a random access memory (RAM), and blurs the 
distinction between parts which are coated by the 

is shield. The shield may be located within the encapsulat- 
ing layer, which includes one or more protective layers 
which are disposed above the chip in the substrate 250. 
A passivation layer 240 is a protective surface coat com- 
prising, for example, silicon dioxide which is deposited 

20 ever the surface of the die during various diffusion 
steps. The substrate 250 is the physical material upon 
which the IC is fabricated or assembled. For a mono- 
lithic device, the substrate typically comprises silicon 
As discussed, a chip such as an ASIC can be 

25 decapsulated by a pirate to expose the die in a relatively 
straightforward manner even when the die has a battery 
powered self-destruct feature. In accordance with the 
present invention, one or more electrically conductive 
members such as standard bond wires of the type used 

30 to connect a bond pad with a package pad, such as 
bond wire 270, are situated to cover the die such that an 
anti-tamper shield is formed. In particular, during fabri- 
cation of a chip, the encapsulating compound is in a 
molten state and flows around and below the anti- 

35 tamper bond wire which are suspended over the die. 
When the compound (e.g., layer 210) has solidified, it 
provides a formidable obstacle as it is more difficult for 
a pirate to use mechanical grinding equipment to 
remove the wire-embedded layer for fear of breaking 

40 (e.g., rupturing) the bond wires and initiating the self- 
destruct feature of the secure processor. 

For example, in the case of a cryptographic chip 
powered by a direct current from a battery or the like, if 
the electrically conductive member is ruptured, power to 

45 a RAM which maintains the secret data will be cut 
thereby causing the data to be erased. If a electrically 
conductive member is used in a component which did 
not have a battery powered erasure feature; then the 
electrically conductive member may instead carry vari- 

so ous control signals However, even the rupturing of such 
a control signal-carrying electrically conductive member 
without the erasure of secret data would thwart a 
pirate's probing attack until the pirate performed the 
necessary time-consuming and difficult repair. 

55 Moreover, even if a pirate could somehow carefully 
remove the layer 210 without rupturing the electrically 
conductive member, by the time the epoxy below the 
conductive member is etched, the conductive member 
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may be eaten away and ruptured due to the corrosivity 
of the etchant This is true since the metal in the con- 
ductive member is chosen to react to the chemical etch- 
ants which are useful in etching the epoxy. Thus, it may 
be desirable to choose a material such as aluminum, s 
which has a relatively low resistance to etchants. Other 
metals, such as gold, have a relatively high resistance 
to etchants. Moreover, it a conductive member is pow- 
ered by a battery, etchants will react in a more aggres- 
sive way. Generally, the selection of the conductive w 
member material can be tailored to provide a desired 
resistance to particular etchants. Conductive epoxy is 
particularly useful as it may be formulated to have a 
similar resistance to etching as the epoxy encapsulating 
layer. 15 

FIGURE 3 is a top view illustrating, in simplified 
form, a secure processor of an integrated circuit with an 
anti-tamper bond wire shield in accordance with the 
present invention. The secure processor 150, includes 
exemplary micro-electronic components such as a RAM 20 
300, a central processing unit (CPU) 302, a readonly 
memory (ROM) 304, and a Data Encryption Standard 
(DES) processor 306. However, note that the present 
invention is equally applicable to non-secure processors 
which may be protected to preserve unencrypted but 2s 
proprietary information. Thus, the term "processor" as 
used herein is meant to encompass encrypted proces- 
sors, non-encrypted processors, and virtually any type 
of micro-electronic circuit or micro-electronic compo- 
nent 30 

FIGURE 3 is meant to a show a variety of possible 
arrangements of conductive members such as bond 
wires in an anti-tamper shield of an IC. It should be 
understood that not all of the bond wires shown are 
required, and that the specific number and positioning ss 
of the bond wires can vary. 

In one example configuration, a signal having a 
positive voltage may be supplied to a bond pad 
310. which is electrically coupled to a bond pad 312. a 
trace 314, and a bond pad 316. Similarly, a negative ao 
voltage V M is present at a bond pad 31 8, which is elec- 
trically coupled to a bond pad 320, a trace 322, and a 
bond pad 324. The voftage may be used to provide 
a current which, when terminated, triggers an automatic 
erasure (e.g., self-destruct) feature of the processor 45 
150. 

Bond wires can be coupled between bond pads 
which are external to the processor 150 and bond pads 
which are internal (e.g., located within) the processor 
150. For example, a bond wire 313 may be coupled so 
between the external bond pad 312 and the internal 
bond pad 326 in the region of the RAM 300. Pad 326 is 
shown as being located outside the RAM 300, but may 
couple an electrical signal to the RAM 300 via a trace, 
for example, not shown. ss 

Similarly, in the region of the CPU 302, a bond wire 
319 may be coupled between the bond pad 320 which 
is external to the processor 150 and the bond pad 328 



of the CPU 302 which is internal to the processor 1 50. A 
bond wire 317 may be coupled between the bond pad 
316 which is ©eternal to the processor 150 and the bond 
pad 332 of the CPU which is internal to the processor 
1 50. In the region of the ROM 304, a bond wire 325 may 
be coupled between the external bond pad 324 and the 
internal bond pad 336 of the ROM 304. 

Bond wires can also be coupled between bond 
pads which are both internal to the processor 150. For 
example, a bond wire 331 may be coupled between 
internal bond pads 330 and 338. 

Bond wires can be further be coupled between 
bond pads which are external to the processor 150. For 
example, a bond wire 341 may be coupled between 
external bond pads 340 and 342, and a bond wire 345 
may be coupled between external bond pads 344 and 
346. 

Additionally, bond wires can be coupled between 
lead frame contacts and external or internal bond pads, 
or other lead frame contacts. For example, a bond wire 
351 may be coupled between a lead frame contact 350 
and an external bond pad 352. A bond wire 356 maybe 
coupled between a lead frame contact 355 and an inter- 
nal bond pad 357. A bond wire 361 may be coupled 
between a lead frame contact 360 and another lead 
frame contact 362. As indicated by the broken line, the 
lead frame contact 362 may be a package lead which is 
located further from the processor 150 than the contact 
360. Note that the positioning of the lead frame contacts 
and bond pads in FIGURE 3 is not necessarily to scale. 
A bond wire 366 may be coupled between a lead frame 
contact 365 and an external bond pad 367. A bond wire 
371 may be coupled between a lead frame contact 370 
and another lead frame contact 372. 

Furthermore, a bond wire can be coupled between ! v 
a bond pad or lead frame contact of the processor 150 
directly to a decoder board (e.g., personal computer 
(PC) board) on which the processor 150 is earned, or 
any other location which allows the bond wire to carry a 
current loop or other signal for use by the processor 
150. In this case, mere removal of the chip package 
from the board or other location will rupture the anti- 
tamper bond wira 

Additionally, a bond wire can be coupled between 
external pads, such as pads 340 and 342, where the 
bond wire does not extend over the surface of the proc- 
essor 150, but extends away from the surface of the 
processor, for example, in a loop (not shown). A similar 
configuration can be had with the contacts, such as con- 
tacts 370 and 372, where the bond wire 371 extends 
away from the processor 150. Thus, the bond wire can 
be routed to a region which is somewhat distant from 
the processor 150, e.g., where the pirate may not 
expect to find it. 

The secure processor 150 may be carried in an IC 
which is embedded in a smart card. A smart card is typ- 
ically a plastic credit-card sized device which contains 
ICs. The smart card is inserted into a reader to allow a 
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component to interface with the ICs. There are various 
methods of packaging ICs into a card. For example, 
after an IC is wire bonded to contacts of a lead frame, 
epoxy can be transfer molded around the die prior to 
inj ection molding of a card. Another approach is to apply 5 
epoxy to a cavity in a card body prior to insertion of the 
contact/die assembly into the same smart card body. In 
either case, an epoxy encapsulating compound can be 
made to flow around the conductive members. 

Furthermore, the body of the smart card forms part 10 
of the encapsulating layer of the IC. Moreover, the bond 
wires of the IC may be routed in the body of the smart 
card away from the region in which the IC is embedded 
such that any tampering with the smart card ruptures 
the bond wires. is 

The use of conductive epoxy to provide an anti- 
tamper shield in a smart card is particularly advanta- 
geous since it allows a lower profile for the card. The 
conductive epoxy can be printed as a thin trace which 
extends over the IC. 20 

FIGURE 4 is a top view of a secure processor of an 
integrated circuit with an anti-probing wire grid shield in 
accordance with the present invention. Bond wires may 
be provided in a grid pattern with a spacing which is 
small enough to prevent a probe tip from passing 25 
through the mesh or moving easily within the mesh. In 
fact, this configuration may be used even when the wire 
does not carry an electrical signal which the processor 
requires to function. The mere presence of the wires 
(ag.. dummy wires) in a grid serves as a deterrent to so 
probing. 

In an example implementation of a wire grid shield, 
a processor 450 includes a micro-electronic component 
410 such as a memory. Bond wires 421, 423, and 425 
are coupled between bond pads 420 and 430, 422 and 35 
432, and 424 and 434, respectively. Sim9arty, bond 
wires 451. 453. and 454 are coupled between bond 
pads 448 and 460, 452 and 462, and 454 and 464, 
respectively. The wires form a grid pattern, shown gen- 
erally at 460. which covers the micro-electronic compo- 40 
nertt 410. The dimensions of the grid 460 may be 
adjusted to aggravate the movement of the tip of a 
probe which a pirate may use. 

The wires of the grid 460 may optionally carry a sig- 
nal which is used by the micro-electronic circuit 410 to 45 
operate. In this case, it may be preferable for some or an 
of the wires to avoid contacting each other to avoid a 
short circuit If so, the wires may be displaced from one 
another as required to maintain the cjid pattern whBe 
avoiding a short circuit so 

When (tommy wires are used in a grid or other pat- 
tern, it is desirable to select a wire composition which 
has a high resistance to the chemical etchants which 
may be used by a pirate in etching the epoxy or other 
protective layer of the IC. As mentioned, metals such as ss 
gold, for example, have a relatively high resistance to 
etchants. 

Accordingly, it can be seen that there are many pos- 
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sible configurations for using bond wires in an anti- 
tamper shield to prevent an unauthorized decapsulation 
of a chip. WHh the anti-tamper shield of the present 
invention, a pirate employing a mechanical grinder tor 
decapsulation would have to leave a great deal of the 
encapsulating compound in place or risk rupturing the 
bond wires. In fact, the bond wires can be arranged 
such that most of the epoxy must be left undisturbed to 
avoid rupturing the wires. K a wire ts ruptured, a self- 
destruct sequence of the chip may be initiated, or a 
required control signal path may be terminated, thereby 
requiring a tirrte-consurning and difficult repair by the 
pirate. 

Moreover, even if the wire does not initiate a self- 
destruct sequence or carry a required control signal, the 
mere presence of the wire can interfere with efforts to 
map the chip via an x-ray machine. Thus, the mere 
presence of 'dummy* bond wires in an anti-tamper 
shield, particularly in a grid pattern, will serve as a 
deterrent, as the pirate may not know whether rupturing 
the wires will render the processor non-functional, to 
either case, the pirate's task is made much more diffi- 
cult time-consuming and expensive; if not impossible. 

Although the invention has been described in con- 
nection with various specific embodiments, those skilled 
in the art will appreciate that numerous adaptations and 
modifications may be made thereto without departing 
from the spirit and scope of the invention as set forth in 
the claims. For example, the invention is not limited to 
use with chips which have an epoxy encapsulating 
layer, but may be adapted for use with a chip which has 
virtually any type of protective layer, or even no protec- 
tive layer. For instance, the invention may be used with 
a device such as an electrically programmable read- 
only memory (EPROM), which can be erased when 
exposed to ultraviolet light An EPROM is typically pro- 
tected by an air gap and a transparent window. In this 
case, the electrically conductive member may be car- 
ried simply in the air gap, and wiD pose an obstacle to a 
pirate even without the epoxy layer. 

Claims 

1. An anti-tamper apparatus for protecting an active 
component of an integrated circuit (IC) from prob- 
ing, said apparatus comprising: 

a wire adapted to carry a signal which allows 
said active component to function; wherein: 
said wire extends, at least in part over said 
active component to hinder access thereto 
when said active component is functioning. 

2. The apparatus of claim 1 , wherein: 

said wire extends between f irst and second ter- 
minuses; and 

said first terminus is external to said processor 



EP0860 882A2 



6 



11 



EP0860882A2 



12 



and said second terminus ts interna) to said 
processor. 

3. The apparatus of daim 1 , wherein: 

said wire extends between first and second ter- 
minuses; and 

said first and second terminuses are both 
external to said processor. 

4. The apparatus of claim 1, wherein: 

said wire extends between first and second ter- 
minuses; and 

said first and second terminuses are both inter- 
nal to said processor. 

&. The apparatus of one of the preceding claims, 
wherein: 

said wire forms a grid pattern. 

6. The apparatus of one of the preceding claims, 
wherein: 

said wire is carried, at feast in part, within a pro- 
tective layer of said IC such that said wire is 
adapted to rupture when said protective layer is 
removed 

7. The apparatus of one of the preceding claims, fur- 
ther comprising: 

a metalDc shield layer which shields at least a 
portion of said active circuit. 

& The apparatus of one of the preceding claims, 
wherein: 

said IC is embedded in a smart card; and 
said wire is adapted to rupture when said IC is 
removed from said smart card. 

9. An anti-tamper apparatus for protecting an active 
component of an integrated circuit (IC) from prob- 
ing, said apparatus comprising: 

a conductive epoxy member adapted to carry a 
signal which allows said active component to 
function; wherein: 

said conductive epoxy member extends, at 
least in part, over said active component to 
hinder access thereto when said active 
component is functioning. 

10. The apparatus of claim 9. wherein: 



said conductive epoxy member is printed, at 
least in part, on said active component 

11. The apparatus of claim 9 or 10, wherein: 

5 

said IC is embedded in a smart card; and 
said conductive epoxy member is adapted to 
rupture when said IC is removed from said 
smart card. 

10 

12. The apparatus of one of claims 9 to 11. wherein: 

said conductive epoxy member extends 
between first and second terminuses; and 
75 said first terminus is external to said processor 

and said second terminus is internal to said 
processor. 

13. The apparatus of one of claims 9 to 1 1, wherein: 

20 

said conductive epoxy member extends 
between first and second terminuses; and 
said first and second terminuses are both 
external to said processor. 

25 

14. TheapparaUiSOfooeo}ciaims9to 11, wherein; 

said conductive epoxy member extends 
between first and second terminuses; and 
30 said first and second terminuses are both inter- 

nal to said processor. 

15. The apparatus of one of claims 9 to 14, wherein: 

35 said conductive epoxy member is carried, at : 

least in part, within a protective layer of said IC 
such that said conductive epoxy member is 
adapted to rupture when said protective layer is 
removed. 

40 

16. The apparatus of one of claims 9 to 15, further com- 
prising: 

a metallic shield layer which shields at least a 
45 portion of said active circuit 

17. An anti-tamper apparatus for protecting an active 
component of an integrated circuit (IC) from prob- 
ing, said apparatus comprising: 

so 

a wire structure which extends, at least in part, 
over said active component to hinder access 
thereto. 

55 1a The apparatus of claim 17, wherein; 

said wire structure forms a grid pattern. 
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